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1.-9. (cancelled) 
10.-15. (withdrawn) 

16. (currently amended) A method for distributed remote network monitor 
monitoring (dRMON) in LAN in a LAN comprising: 

deployin g, within each of a plurality of ESs to be monitored, dRMON 
agents executable code comprising an dRMON agent associated with the ES 
that-eem - municato configured to communicate with a dRMON proxy 
connected to the LAN within ESs to be monitored , each saM dRMON agents 
agent implementing RMON functional groups but only capturing and 
analyzing packets that their nativo ES oends or receiv e s transmitted and/or 
received by the ES ; 

forwardin g, periodically by the dRMON agents, on a periodic basis 
having the dRMON agents forward agent data including statistics and/or 
captured packets to said dRMON proxy , e xisting somewhere on the LAN ; 
and 

combining receiv e d the forwarded agent data thereby creating at the 
dRMON proxy a view that a stand alone RMON probe would have if all the 
ES were on the sam e LAN segm e nt with it . 

17. (currently amended) The method according to claim 16 wherein said 
dRMON proxy can mimic the SMMP r espo nses of a prior art non distributed 
RMON prob e includes a set of SNMP interfaces so that existing network 
application management software can interact with said dRMON proxy as 
though said dRMON proxy were a non-distributed RMON probe. 
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18. (currently amended) The method according to claim 16 wherein in a 
default mode, ESs in the same multicast domain are treated by a dRMON 
proxy as though they are on one LAN segment to RMON applications that 
interact with the dRMON proxy though it were a RMON probe and a user is 
provided with the ability to combine such that ports and hosts are 
combinable i a - erd e p to create Virtual LAN (VLAN) definitions to cause the 
monitoring function to behave operate as though all selected hosts were on 
the same LAN segment being served by the same RMON probe with the 
dRMON proxy m-this- e mbodim e nt creating and maintaining several such 
views with each appearing as one interface to RMON management 
applications. 

19. (currently amended) The method according to claim 16 whereby said 
dRMON agents perform continual response time monitoring and forward the 
monitoring results to the dRMON Proxy. 

20. (currently amended) The method according to claim 16 whereby said 
software executable code utilizes native OS APIs to gather information 
about the ES that could not be gathered via packet capture and analysis, said 
information being selected from the group consisting of: (1) Network 
protocol stack configurations and NIC configurations including problematic 
situations; (2) Application information ranging from including what 
protocols an application is bound to, to its manufacturer, version, file date 
and time, DLLs used and their versions; (3) System information such as 
memory, CPU, disk space, current resource utilizations; and (4) System 
performance metrics. 
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